Use the exactly 32 byte long version of db_key_base with aes-256-gcm
Treewide, usage of a truncated version of db_key_base has been common and it works fairly well with `aes-256-cbc`. However, with `aes-256-gcm` the key must be exactly 32 bytes long - if it's longer it has to be truncated, but if it's shorter it has to be padded. For this reason the such a version of the key, `attr_encrypted_db_key_base_32`, was introduced in 777b6713. This changes all occurrences of `attr_encrypted_db_key_base_truncated` being used with `aes-256-gcm`.
显示
- app/models/alert_management/http_integration.rb 1 个添加, 1 个删除app/models/alert_management/http_integration.rb
- app/models/alerting/project_alerting_setting.rb 1 个添加, 1 个删除app/models/alerting/project_alerting_setting.rb
- app/models/application_setting.rb 16 个添加, 16 个删除app/models/application_setting.rb
- app/models/atlassian/identity.rb 2 个添加, 2 个删除app/models/atlassian/identity.rb
- app/models/bulk_imports/configuration.rb 2 个添加, 2 个删除app/models/bulk_imports/configuration.rb
- app/models/clusters/applications/prometheus.rb 1 个添加, 1 个删除app/models/clusters/applications/prometheus.rb
- app/models/clusters/providers/aws.rb 1 个添加, 1 个删除app/models/clusters/providers/aws.rb
- app/models/concerns/packages/debian/distribution.rb 1 个添加, 1 个删除app/models/concerns/packages/debian/distribution.rb
- app/models/error_tracking/project_error_tracking_setting.rb 1 个添加, 1 个删除app/models/error_tracking/project_error_tracking_setting.rb
- app/models/incident_management/project_incident_management_setting.rb 1 个添加, 1 个删除...ncident_management/project_incident_management_setting.rb
- app/models/pages_domain_acme_order.rb 1 个添加, 1 个删除app/models/pages_domain_acme_order.rb
- app/models/serverless/domain_cluster.rb 1 个添加, 1 个删除app/models/serverless/domain_cluster.rb
- config/secrets.yml.example 1 个添加, 1 个删除config/secrets.yml.example
- config/settings.rb 8 个添加, 6 个删除config/settings.rb
- db/migrate/20191120115530_encrypt_plaintext_attributes_on_application_settings.rb 8 个添加, 8 个删除...0_encrypt_plaintext_attributes_on_application_settings.rb
- db/migrate/20201008013434_generate_ci_jwt_signing_key.rb 1 个添加, 1 个删除db/migrate/20201008013434_generate_ci_jwt_signing_key.rb
- ee/app/models/geo_node.rb 1 个添加, 1 个删除ee/app/models/geo_node.rb
- spec/migrations/generate_ci_jwt_signing_key_spec.rb 1 个添加, 1 个删除spec/migrations/generate_ci_jwt_signing_key_spec.rb
加载中
想要评论请 注册 或 登录